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In the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A Network security testing apparatus comprising: 

a first tester that is adapted to communicablywuple to a system under test; wherein 
said first tester is adapted to sequentially perform a plurality of tests on the system under test; 

wherein the plurality of tests includes a first test and a second test, each of which is g!S 
5 adapted to return system environment information regarding the system under test; 

wherein the fust test a execut e d b e fore the second test; an d 

wherein dii fiist test differs fr*t n t >*» second test i n tha t t he sec o nd test is each of the 
plurality of tests are more specific to the system under test based on information gained from the first 
^ previa test 

2. (Currently Amended) The network security testing apparatus of claim 1, wtorflifl *hp 
plurality of te st comprises at least three tests. 

wherein n o tests ^fterf o nnedort the sys t ein tes t a ft er the firs t test and befo r e the 

second te st; 

5 wher e in t he tim e p eriod between the first test and the sec o nd test can be n e gligible. 

3. (Currently Amended) The netwoik security testing apparatus of claim 1, wherein the 
second a subsequent test is based at least partially upon system environment information detected by 
th e firs t a the previous test 

4. (Original) The network security testing apparatus of claim 3, wherein the system 
environment information includes information regarding network connectivity from the first, tester to 
the system under test. 
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5, (Currently Amended) The network security testing apparatus of claim 3, v*ertin the 
system environment information includes stem it j uUUl.1l network security vulnerability infOTnation. 

6, (Currently Amended) The networic security testing apparatus of claim 5, wherein the 
set « » i * y nkojicle network security vultterabilitv information includes se&siuui&UbU&habili t y giSasSliga 
information relating to an IP address used in the previous first test. 

7. (Currently Amended) The network security testing apparatus of claim 3> further 
comprising: 

a second tester that is adapted to communicabiy couple to a system under test; 
wherein the first previous test is executed by said first tester; 

wherein determination of whether the second subsequent test is executed by said first 
5 tester or by said second tester is made based at least partially upon the system en vironment information. 

8, (Currently Amended) The network security testing apparatus of claim 3, wherein the 
second subsequent test includes execution of a test tool selected from a plurality of test tools based at 
least partially upon the system environment information. 

9. (Original) The network security testing apparatus of claim 1, wherein said first tester is 
adapted to execute an additional test of the plurality of tests if said first tester has not yet definitely 
gathered all possible system environment information about the system under test, in tight of the 
plurality of tests. 

10. (Currently Amended) The network security testing apparatus of Claim 1, *het£fatte 
plurality of tests cont inue until all relevant information about the system under tatf hftS focft ^fflfled, 

The iiLlwuik aeuuity lealing apparatus of claim 2< wherein the second mti& based at 
l e ast partially upon system environment informati o n detected by t he fust teat 
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1 1 . (Currently Amended) The network security testing apparatus of claim 7, wherein the 
second ^sequent test includes execution of a test tool selected from a plurality of test tools based at 
least partially upon the system ehvirontnent information. 

12. (Original) The network security testing apparatus of claim 3, wherein said first tester is 
adapted to execute an additional teat of the plurality of tests if said first tester has not yet definitely 
gathered all possible system environment information about the system under test, in light of the 
plurality of tests, 

13. (Currently Amended) A hetwotk security testing method comprising: 

a) executing a firstiest by a first tester, wherein the first test is targeted at a system wider 
test, and wherein the first tester is commuhicably coupled to the system under test; 

fe> receiving first information from the first test about the system under test, after 
5 executing the first test; 

£) executing a second test after said recei ving first information, wherein the second test 
is more specific to the system under test based on the first information; 

& receiving second information from the second test about the system under test, after 
executing the second test; and 
10 repeating stens aWft apluralitv Of times until all relevant information about tifeSVStem 

under test has been collected: and 

f} wherein the second information is more specific to the system under test based on the 

first information* 

14. (Original) The network security testing method of claim 13, wherein the time period 
between said executing the first test and said executing the second test can be negligible. 

15. (Original) The network security testing method of claim 13, wherein said receiving first 
information comprises receiving system environment information. 
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16. (Original) The network security testing method 6f Claim 15, wherein said receiving 
system environment information comprises receiving information regarding network connectivity from 
the first tester to the system under test. 

17. (Currently Amended) The network security testing method of claim 15, wherein said 
receiving system environment information comprises receiving suluiUj obstacle netWQ*fc -'-IWflflfcfc 
vyfrffiraMtty information. 

18 (Currently Amended) The network security testing method of claim 17, wherein said 
receiving scetmty obstacle network secu rit y vufarerabilitv information comprises receiving session 
e stAblishAbi ttty connection information relating to an IP address used in said executing the first test 

19. (Original) The network security testing method of claim 15, further comprising 
determining whether the second test will be executed by the first tester or by a second tester based at 
least partially upon die system environment information, before said executing the second test. 

20. (Original) The network security testing method of claim 1 5, further comprising selecting 
the second test from a plurality of tests based at least partially upon the system environment information. 

21 . (Original) The network security testing method of claim 13, further comprising: 
determining whether all possible information regarding the system under tesfchas been 

received in light of the plurality of tests; and 

executing additional tests until all possible information regarding the system under test 
5 has been received in light of the plurality of tests. 

22. (Original) The network security testing method of claim 14, wherein said receiving first 
information comprises receiving system environment information. 
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23. (Original) The network setmritytestiiig method of dam 19, further comprising selecting 
the second test fromaplurality of tests based at least partially upon the system environment information. 

24. (Original) The netWdrk si^rity testing me^d of clam 

determining whether all possible system environment information regarding the system 
under test has been received in light of the plurality of tests; and 

executing additional tests until all possible system environment information regarding 
5 the system under test has been received in light of the plurality of tests. 

25. (Currently Amended) A computer program product for network security testing stored 
in a computer-readable medium, comprising! 

instructions for executing a first test by a first tester, wherein the first test is targeted 
at a system under test, and wherein the first tester is communicably coupled to the system under test; 
5 fc) instructions for receiving first information from the first test about the system under 

test, after executing the first test; 

s) instructions for executing a second test after receiving first information^ wherein the 
second test is more specific to the system undfer test based on the first information; 

instructions for receiving second information from the second test about the system 
10 under test, after executing the second test Jggl: and 

e\ instructions for repeating a) - dVa plurality Of times until all relevant iftfon^tio n 
about the system under test has been collected; and 

D wherein the second information is more specific to the system under test based on the 
first information. 

26. (Original) The computer program product of claim 25, wherein the time period betv/een 
executing the first test and executing the second test can be negligible. 

27. (Original) The computer program product of claim 25, wherein receiving first 
information comprises receiving system environment information. 
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28. (Original) The computer program product of claim 27, wherein receiving system 
environment information comprises receiving information regarding network connectivity from the first 
tester to the system under test 

29. (Currently Amended) The computer programproduct of claim 27, wherein said receiving 
system environment information comprises receiving aiuuily obstacle petwork security vulrterahilitv 
information. 

30. (Currently Amended) The computer program product of claim 29, wherein receiving 
seew ityobstadc network security vulnerability information comprises receiving session establishabiiity 
information relating to an IP address used in executing the first test. 

3 1 . (Original) The computer program product of claim 27 , further comprising instructions 
for determining whether the second test will be executed by the first tester or by a second tester based 
at least partially upon the system environment information. 

32. (Original) The computer program product of claim 27, further comprising ihstaictions 
for selecting the second test from a plurality of teste based at least partially upon the system environment 
information. 

33. (Original) The computer program product of claim 25, fUrther comprising: 
instructions for determining whether all possible informationregarding the system under 

test has been received in light of the plurality of tests; and 
5 instructions for executing additional tests until, all possible information regarding the 

system under test has been received in light of the plurality of tests. 

34. (Original) The computer program product of claim 26, wherein receiving first 
information comprises receiving system environment information. 
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35. (Original) The computer program product of claim 31, further comprising instructions 
for selecting the second test from a plurality of tests abased at leastpartiallyuponthe system environment 
information. 

36. (Original) The computer program product of claim 3 1 > further comprising: 
instructions for determining whether all possible system environment information 

regarding the system under test has been received in light of the plurality of tests; and 

instructions for executing additional tests until all possible system enviroitineftt 
information regarding die system under test has been received in light of the plurality of tests. 

37. (Canceled) A net w or k securi t y testing apparatus Comprising : 
a cust o mer profile; 



- a plurality of tes t to ol s ; 

10 a firs t tcstei that is adapted toeouuiuuiicably c o uple t o a sys t em unde r t e st; 

wherein a selected tea t t o ol is s e lected fluiu said plurali t y o f t est tools based at least 

partiaHy upon said customer pr o fil e ; an d 

wherein said fiist teStei is adapted fa execute the selected test tool su as to test die system 

under t es t , 

38. (Canceled) Th e ne tw o r k securi t y t esting apparatus vC claim 37, whuein said eus t oni er 
profile is dctcmrined based at least paitially upon an iuitial mapping: 

39. (Canceled) The network security teSUiig appaiAliii. of claim 37, wheieiu the customer 
profile is based at least partially on iftfoiination pr ovided by a third party. 

40. (Canceled) The network scemity testing appaialus uf elaim 37, whuein the cust o me r 
pi uf dc is at leas t p ar t ially produced by t he method of claim 24; 
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4L (Canceled) The network yxuiilj i^img app4iMtyg o fclaiiu 37, fuilhei euiupfismg. 

— — a-second tester that is adapted to cwmnunicably couple tu the sys t em undci test; 

whu win deteimiiiatiun of wlie to tlit fu&l testCJ f c r t Lt Seeund teste executes the Selected 

test tuul is based a t least partially upon said custumei profile* 

42. (Canceled) Tlit ne t w o rk securi t y testing apparatus of claim 4 1, wherein said Cusioinei 
piufile is detuniincd based at least ft&rtiallj upon an initial iitippmg. 

43. (Canceled) The ne t wo r k securi t y te sting apparatus of claim 42, wherein the custom er 
pmfile is at least pailiallj piudueul bji method of claim 24. 

44. (Canceled) A rie t w o A security testing mc t frod comprising: 

selecting a selected 'tot WbHrom a plmality of test tuuls based at least partiality up o n a 

cttstomer pr o file; and 

e juxmii i g die selected test Luul by a fiist tester so as tu test a system undu teirt, frhtircin 

5 die first tcstei is conrrnnmcably coupled to tine system under test. 

45. (Canceled) The niiMbrk secuiily testidg method o f elaini 44, fttrttaa mmprisihg : 

peifuiming an iiiitbd mapptttg of t h e system undci test, and 

ei eating the custumu piufile based At least partially upon the initial mappi&ff 

46. (Canceled) The net t vurk seem ftj testing meth od of claim 44, wheiciu OilCuMuttiti 
p r ofil e is based at least paitially on informati o n p iu vided by a thiid part y: 

47. (Canceled) The rietfriiA seem Uy testing method uf elaim 44, whciciu theyusteme r 
piofH e is at least partially piodoced by die meth o d o f claim 2 4 , 

48. (Canceled) The iietwoik security testing meth o d of elaim 44, fmthei cumpiising 
sel e etiug die first tester fr o m a plurali t y of lestcfs based at least paitially upun a eusuauei pi -o file, 
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49. (Canceled) The netwuiK scemily testing luc l iiuduf tloitii 40, ftaUiei c o mprising: 

performing an miikl litapping of the system uh d er test; and 

ereating t he eus t onfer pr o file b a sed at leas t partigSy upon t in initial inappiiig: 

50. (Canceled) The ne t wo r k scmiity testing method of ■ claim 49, wherein thrtostomct 
profile is at least partially produced by the "method o f claim 24, 

51. (Canceled) A compu te r program p i uduct f o r netwo rk securi t y tes ti ng st o red in a 
e omptr t epTcadabfc medium; compris ing: 

inatiuciiom foi selecting a selec t ed test tool from a plurality of tes t tools based a t feas t 

paitially upon a easterner piofil e ; and 

5 — trau uciiona f o r exe c u t ing the sele cte d test twl by a fii at lesler so as totcsl a system un der 

test, wherein till first tcstei is tomitmnieabty coupled t o t he sys t em under t est 

52. (Canceled) The C o mputer program product of claim 5 1 , fa* thu compi isiug UriitmciioiiS 
foi creating the customer prufile based at leas t partially ttponaii initial mapping. 

53. (Canceled) The computet piugram pioduct of claim 51, therein t he eust d inei profile 
is based at least paitially ou mfumiation p ro vided by a third p atty: 

54. (Canceled) The eumpuiu program piuduel! of claim 51, whueiii die eusiumei piufile 
is at least pai tially produced bythe method o f claim 2 4 > 

55. (Canceled) Th e computti program p r oduct of c laim 51, fuiiliei eompming instructi o ns 
fui selecting die t cstei Horn a plu r ali t y uf testers based at least paitially upon a cust om er pr o file. 
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56. (Canceled) Hit comptrter -program piuduU of claim J3, fuilhd comprising: 

— hgtracttoitt foi peifoniiiiig an initial map p ing, of the system under last; and 

imuutiions foi ueating Uic custom*! p iofilc bas e d at least paUiallj i upmi the initial 



mapping: 



57. (Canceled) Tin Mamjmtci piugiaili piuduU uf claiiH 50. whmeiu Uic i.u*UJiu i ii pnofifc 
is at least pr o duced by the method of claim 2 4 . 

58. (Currently Amended) A network security testing apparatus comprising: 
a plurality of testers; 

a customer pi o ftle} 

wherein each of said plurality of testers is adapted to communicably couple to a system 

5 under test; and 

wherein a test of the system under testis performed by a selected tester of saJdplurality 
of tester testers: the sUiUid testier being atlctltd flom said pluiality uf tutCu based at partial*/ 

upon said easterner profile. 

wherein saido l nralitv of testerfe has a load balance characteristic describing ft tegftti s£ 
10 balance of loa ds of testers of said phmditv of testers: and 

wherein the s e fcpted t^tei- is selected from saidoluralitv of testers based at least partially 

nn optimizing the load bjjafl££ characteristic. 

59. (Canceled) The network ju,urity testing appaiatus o f ilaim 30, wbuuii said Luituiuu 
yiofilc is dctuuuiuui based ut lui&l pjutiallj f upon an initial uiapping. 

60. (Canceled) The network intuity testing appaiatua uf claim 50, wherein the euslonicr 
profile is at least par t ially pioduced by the method o f cla im-3*; 
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61 . (Canceled) The u ei work samily UMtiug apparatus uf claim JO, — 

wheiciu *aid plmaHl.y of te&lus lias a load balainC UiaiaUui&Ui describing a degree of 

\ of testers of ^id plurality uf iUlCu, uud 

whatin the selected tester is seltciul Hum said p lurality of tcstef ' S based at le ast partially 



5 on o ptimizing the l e ad balance diaiactcris t ic. 

62. (Original) The network Security testingapp^tra of claim 58, 

wherein each tester of said plurality of testers has at least one quality of communicable 
coupling to the system under test; artd 

wherein the selected tester is selected from said plurality of testers based at least partially 
5 on die selected tester's quality of communicable coupling, 

63. (Original) The network security testing apparatus of claim 62, wherein the quality of 
communicable coupling includes: 

cost per bit; 
absolute speed; and 

5 geographical proximity of the selected tester to the system under test. 

64. (Currently Amended) A netwotfc security testing method comprising: 
selecting a selected tester from a plurality of testers based at leant partially upon a 

customer profile; and 

executing a test by the selected tester, wherein the test is targeted at a system Uftder test, 
5 and wherein the selected tester is communicably coupled to the system under tg§t; test 

wherein the pl urality of tester* has a load balance characteristic describiiM ft tetitt pf 
balance of load s of testers of the plurality of testers; and 

wherein said selectin g a selected tester from a plurality of testers is farther frwft* St kft a l 
partially on optim izing the load balance ehar^tdsfcL 
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65. (Canceled) The network atcuri t y testing m e thod of cfanm 64, Puillm lujupiisiiifei 
performing an ini t ial mapping of (Re sy sluu undti teal, and 

- nulling the cm ton iei pr o file baaed at lcaal partially Upon t he initial mapping: 

66. (Canceled) The network uxwily testing niUhud uf claim 64, wherein t he Usluiuu 
profile is at leaM partteHy produced by the method of claim 2 4 . 

67. (Canceled) The network security testing method o f claim 64, 

wherein t he plurali t y o f testers has laluadbalatie e eharacteiiitic describing a deg r ee o f 

balance of luada uf testers o f t hfe p lurali t y o f testers; and 

wh e r e in said selec t ing a g^l e c t ed t ealei from a plurality of tes te rs is f urther baStfl a t least 

5 partraHy o n oplimi,uHg die load balance charaeteri s tic. 

68. (Original) The network security testing method of claim 64, 

wherein each tester of the plurality of testers has at least one quality of coimroimcable 
coupling to the system under test; and 

wherein said selecting a selected: tester from a plurality of testers is further based at least 
5 partially on the selected tester's quality of communicable coupling, 

69. (Currently Amended) The network security testing appaiatus m&hod of claim 68, 
wherein the quality of communicable coupling includes: 

cost per bit; 
absolute speed; and 

5 geographical prdxitiuty of the selected tester tx> the system under test 

70- (Currently Amended) A computer program product for network security testing stored 
in a computer-readable medium, comprising: 

instructions for selecting a selected tester from a plurality of testers based at leas t 
pai tially upon a customer profile! and 
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5 instructions for executing a test by the selected tester, wherein the test is targeted at a 

system tinder test, and wherein die selected tester is communicably coupled to the system undef Jgstl 
lest. 

wherein the plurality of testers has a loa d balance characteristic describing a degree of 
balance of loa ds of testers of the btoralitv of testers: and 
10 wherein the se lecting - a selected tester from a plurality of testers is further bared 3t feast 

partiallv on o ptimizing the load balance characteristic, 

71. (Canceled) The coii T pulu program pr o duct of claim 70, fmthc r comprising: 

- impacti o ns fo r pdrfemtfag m iuitM lapping of the system undci t e st; and 

instructions fat crtatmg the custome r pr o file based a t leas t partially up o n the initial 

ma pp ing : 

72. (Canceled) Th e romptrttt pi ogiant product o f claim 70, whe rei n the cust o mer profile 
is at lutot partially produced by the method of claim 24. 

73. (Canceled) The e p m p utci prog r am pioduet oftfattm 70, 

wherein the plurali t y o f titers hiui a load balanc e characteristic desc ri bing a degiic o f 

balauee ofluada ofttstcrs of t he p lmality of tiatus; and 

wherein the sel e cting a sel ect ed tester f ro m a pi UiAlity uf testers is far t her bas e d at lea st 

5 paattaHy o n optimizing the load ba l ance c hai r aetei is tic. 

74. (Currently Amended) The com puter program oroduct netwuik siiuriu testing method 
ofclaim70, 

wherein each tester of the plurality of testers has at least one quality of commumcable 
coupling to the system under test; and 
5 wherein the selecting a Selected fester from a plurality of testers is farther based at feast 

partially on the selected tester's quality of communicable coupling. 
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75. (rhimshtiy Amended) W lesiiu&awaiaius 
of claim 74, wherein the quality of commuraca^ coupling includes: 

cost per bit; 
absolute speed; and 

5 geographical proximity of the selected tester to the system under test. 

76. (Original) A network security testing apparatus comprising: 

a first tester that is adapted to communicably couple to a system under test, wherein said 
first tester is adapted to perform a test on the system bunder test; 

wherein said first tester is adapted to make a first attempt to communicably couple to the 
5 system under test before the test; 

wherein said first tester is adapted to make a second attempt to communicably couple to 
the system under test after the test; and 

wherein the combination of success of the first attempt and failure of the second attempt 
are interpreted as detection of the test by the system under test 

77. (Original) The network security testing apparatus of claim 76, wherein each test returns 
security obstacle information of the system under test. 

78. (Original) The network security testing apparatus of claim 76, 
wherein the first attempt is made using a first originating IP address; 
wherein the second attempt is made using a second originating IP address that is 

essentially the same as the first originating IP address; 
5 wherein a third attempt to communicably couple to the system under test is made using 

a third originating IP address that is different from the second originating IP address; and 

wherein the combination of success of the first attempt, failure of the second attempt, and 
success of the third attempt is interipreted as a possibility including the detection; and 

wherein the combination of success of the first attempt, failure of the second attempt* and 
10 failure of the third attempt is interpreted as a possibility including: 

AMENDMENT AND RESPONSE . 

S/N 10/043,654 
Atty. Dkt, No. CRIT-27301 



PAGE 17/31 1 RCVD AT 10/13/2005 5:32:42 PM [Eastern Daylight Time] 1 SVR:USPTO€FXRF-6/24 * DNS:2738300 * CSID:972 479 0464 1 DURATION (mm-ss):1M4; 



SENT BY: HOWISON, & ARNO; 972 479 0464 ; OCT-13-05 4:54PM; PAGE 18/31 



• .16 

a network coiihcctivify problem between the first tester and the system under test; and 
the detection. 

79. (Original) The network security testingapparatus of claim 77, further comprising: 
a second tester that is adapted to communicably couple to the system under test; 
wherein the combination of success of die first attempt, failure of the second attempted 

success of the third attempt is interpreted as a possibility including the detection; and 
5 wherein the combination of success of the first attempt, failure of the second attempt, and 

failure of the third attempt is interpreted as a possibility including a network connectivity 
problem between the first tester afid the system under test 

80. (Original) A network security testing method comprising : 
atteinpting a first communicable coupling by a first tester to a system under test; 
executing a test by the first tester, wherein the test is targeted at the system ucrier test; 
attempting a second communicable coupling by the first tester to the system under test; 

and 

interpreting the combination success of the finsit communicable coupling and feUure of 
the second communicable coupling as detection of the test by the system under test. 

81. (Original) Then<*W6rk security testing method of claim 80, further comprising teteiving 
security obstacle information of the system under test, responsively to said executing the test. 

82. (Original) The network security testing method of claim 80, further comprising: 
attempting a third communicable coupling to the system under test; 
wherein said attempting a first communicable coupling is made using a first originating 

IP address; 

5 wherein said attempting a second communicable coupling is made using a second . 

originating IP address that is essentially the same as the first originating IP address; 
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wherein said attempting a third communicable coupling is made using a third originating 
IP address that is different from the second originating IP address; 

wherein the combination of success of said attempting a first communicable coupling, 
10 failure of said attempting a second comimnricabiec^ of said attempting a 

third communicable coupling is interpreted as a possibility including the detection; and 

wherein the combination of success of said attempting a first communicable coupling, 
failure of said attempting a second communicable coupling, and failure of said attempting a third 
communicable coupling is interpreted as a possibility including: 
15 a network connectivity problem between the first tester and the system under test; and 

the detection. 

83. (Original) The network security testing method of claim 80, ftirther comprising: 
attempting a third communicable coupling by a second tester to the system under test; 
wherein the combination of success of said attempting a first communicable coupling, 

failure of said attempting a second communicable coupling, and success of said attempting a 
5 third communicable coupling is interpreted as a possibility including the detection; and 

wherein the combination of success of said attempting a first communicable coupling, 
failure of said attempting a second communicable coupling, and failure of said attempting a third 
communicable coupling is interpreted as a possibility including a network connectivity problem 
between the first tester and the system under test. 

84. (Original) A computer program product for network security testing stored in a 
computer-readable medium, comprising: 

instructions for attempting a first communicable coupling; by a first tester to a system 

under test; 

5 instructions for executing a test by the first tester, wherein the test is targeted at the 

system under test; 

instructions for attempting a second communicable coupling by the first tester to the 
system under test; and 
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instructions for interpreting the combination o f success of the first communicable 
1 0 coupling and failure of the second communicable coupling as detection of the test by the system 
under test. 

85. (Currently Amended) The computer program product of claim 84, further comprising 
instructions for receiving seem ity uUiiiClu network security vulnerability information of thci system 
under test, responsively to said executing the test, 

86. (Original) The computer program product of claim 84, further comprising: 
instructions for attempting a third communicable coupling to the system under test; 
wherein the attempting a first coiftmunicable coupling is made using a first originating 

IP address; 

5 wherein the attempting a second communicable coupling is made asing a second 

originating IP address that is essentially die same as the first originating IP address; 

wherein the attempting a third communicable coupling is made using a third originating 
IP address that is different from the second originating IP address; 

wherein the combination of success of the attempting a first communicable coupling, 
1 0 failure of the attempting a second communicable coupling, and success of the attempting a third 
communicable coupling is interpreted as a possibility including the detection; and 

wherein the combination of success of the attempting a first communicable coupling, 
failure of the attempting a second communicable coupling, attd failure of the attempting a third 
communicable coupling is interpreted as a po^iTDility including: 
1 5 a network connectivity problem between the first tester and the system under iskt; and 

the detection. 

87. (Original) The computer program product of claim 84, further comprising: 
instructions for attempting a third communicable coupling by a second tester to the 

system under test; 

wherein the combination of success of said attempting a first communicable coupling, 
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failure of said attempting a second communicable coupling, and success of said attempting a 
third communicable coupling is interpreted as a possibility including the detection; and 

wherein the combination of success of said attempting a first communicable coupling, 
failure of said attempting a secottd communicable coupling, and feilure of said attempting & third 
communicable coupling is interpreted as a possibility including a network connectivity problem 
between the first tester and the system under test. 

88. (Currently Amended) A networfc security testing apparatus comprising: 
a tester communicabtv cbupfed to a system under test : 

a test tool; 

an application programming interface (API) adapted to in terface between said tester and 
5 said test tool, said API further including an API stub enabling said test tool to be e x ec u ted bY Mid tester 
even if the outputs of said te ster do not directhr chrresncmd to the ifinuts of said test tool and SUCb frat 
said test tool may be executed bv said tester even ifthe irifauts of said tester do not ditectW conesaond 
to the outnuts of said test tool, said API further including a common API for interfacing betwesft foe test 
tog! and jnypyctioflff provided m foe test tool; and 

10 therein s aid ATI U adapted lu UuXifatt between said tester and said test tool, sudrthat 

said tes t tool may be e x e cut e d by said tester even if the o utpu t s of said tester do n o t direc t ly 
a - n respond tu Hit iuputi of said test toofrand such 0^ said ttirt t oo l ntay b e executol bj^ said 
luitci t ven if the inputs of said tester do no t directly euiitsportd tu die outputs of said test tool; 

wherein said tcsfei is adapted l o be wnrniunicably coupl e d tu a system mdertest; and 

1 5 wherein said tester is adapted to test the system under test by execution of said test tool. 

89. (Original) A network security testing method comprising: 

adapting an application programming interface (API) to interface between a tester and 
a test tool, such that the test tool may be executed by the tester even if the outputs of the tester do 
not directly correspond to the inputs of the test tool, and such that the test tool may be executed 
5 by the tester even if the inputs of the tester do not directly correspond to the outputs of the test 
tool; 
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executing the test tool by the tester, 

wherein the test tool is targeted at a system under test; and 

wherein the tester is communicably coupled to the system under test 

90. (Original) A computer program product for network security testing stored in a 
computer-readable medium, comprising: 

instructions for adapting an application programming interface (API to interface between 
a tester and a test tool, such that the test tool may be executed by the tester even if the outputs of the 
5 tester do not directly correspond to the inputs of the test tool* and such that the test tool may 

be executed by the tester even if the inputs of the tester do not directly correspond to the outputs 
of the test tool; 

instructions for executing the test tool by tbe tester; 
wherein the test tool is targeted at a system under test; and 
1 0 wherein the tester is communicafcly coupled to the system under test. 

91. (Canceled) A n et work sec mUy testing appara t us comprising: 

a t es t e r t ha t i s cumiuuiiicably cOu p t e d t o a system under test, wherein &aid teste r is 

a dapted to test Hit system under test; 

wherein said lislu U adapted to execute a fir s t test t oo l to test the sy stun uader t ea t ; 
5 whuuin mid tester is adapted t o execute a second lest tuul Ui test the sy slim unde r t est; 

and 

wherein a t hai period o f selected length is iutcfposul bUw ccn ihi execution of fee fir s t 

test tool and t h e e xecution urihe second tes t tool during which said tes t ci duea nut test the 
syst e m under test 

92. (Canceled) The network aixuiilj; lining Apparatus of claim 9t - 
wherein the selu^ttd length is crfreatdom liuflth; and 

wherein each t e st tctmuA securi ty obstacle uifuiiiiation of t he syMuu midu tost. 
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93. (Canceled) A aelwoik securi t y testing m et hod cumpiism gr 

e x e cu t ing a first test tool by a tester, wherein the first t e st tuOl is taigttcd at a system 

undci test; and wher e in fee tester is c o mriiunicably coupled to the system un d er t es t ; 

executing a seco n d t est tool by the tester, wherein the sec o nd test tool is few getcd at the 

5 s ys tem ninde r t es t ; and 

selecting a time p tn o d o f sel ecte d l eng th t o fellovv said executing the first t est tool and 

precede sai d executing t he second test tool. 

94. (Canceled) Th e n et w o rk se c uri t y te s t ing method o f claim 9 3, fbrtfaci luutpmmg : 
recei v htg securi t y o bstacle information of the system under t est» r cspomively to Said 



excepting the first t est tool and resp on siv e ly to said ex e cu t ing the sec o nd t est t o o l; 

wh e re in said selecting a t ime period pf selected length comprises selecting a tttrie period 

o f random * l e ngth . 

95. (Canceled) A compu t et progiaiii product for ne t wo r k senility testing Stored in a 
cuinputer^ieadable medium; tannpmtttg: 

instructions for e x e cuting a first test t ool by a Wfttcii, wherein t h e first test to o l is targeted 

at a -system under t est, 2nd wherein t he t ester is e o mmunicably coupled to the system under t es t ; 

instructi o ns f o r executing a setoW t ea t too tby the test e r whereintlrc second test tool 

is tai acted at the system under t es t ; and 

instru c tions fei selecting a time period of selected l e ng t h to follow e xecution of the first 

test tool and precede the execution o f the second test tool 

96. (Canceled) The computet program pruduU of Claim 9 5, fuithu comprising , 

— — instructions fan tbecrving s e curi t y o bstacle inf b mlati o n of t he system unde r " t es t , 

r c sponsivciy to executing the fi r st te s t t ool and rcsp o nsively to executing the sceond t est 
tootj 

wherein t he selected teagfe h oftandom length: 
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97. (Canceled) A network sccmii^ tL&tiiig appdiflluA uomph&tiig, 
— a plu r ali t y of tester*; 



-a plurality of test t be ls; 

wh e rein each o f said p liuality of testeis is adapted to ^limiuuicably c o uple lu a system 

— — wherein a r andom one o f jutid plmali t y of t eat toufc is executed by a random o at of said 

p lurali t y o f testers, the laiakmi o ne o f said phtrality o f teat tools; being execu t ed so as to t arget th e 
yystenrtmdci test, whereby the systertHittdcr t es t is t este d : 

98. (Canceled) The ne t w or k securi t y testing appara t us of c laim 9 7, wherein die laudum uiic 
'of afl j i j pfaraHty "<* toots t»»*dagHo c frto re teffi ^seeortty ubiuik netwuik sLciu'itv vutherabffitg 
infoimation o f the syst e m un d er ttst. res p ons ib ly t o being executed, 

99. (Canceled) A n et w d -rk s e cuiity testing method eontpmmg 
— — randomly selecting-* o mi of a plurali t y o f test too ls ; 



laudcimly scltcthig a ciit of a plurality of testers; 



-e x e cuting the one of the plmalily uf list took by tire oui of the plmalily of testers; 
wh e nin the one of Uic plurali t y o f t est tools UtargOtdata system uudei test, and 
- wh e i e in the one o f fe e plu r ali t y of testers is tonnuunicaUly toupled t o the systein under 



testr 



100. (Canceled) The iiCtvitwK stiuuty testing lncthud of claim 99, fmlliu CuAiipusiiig 
r e c e iving sccmity o bstacle iiifoiuiati ci n of the sys t em urnki test; respdnsivcly to said executing the o ne 
of ' the plurality of t est tools. 

101. (Canceled) A-^dftffi^ for net w ork security testing st o red in a 
computemcadable medium, comprising: 

— ins t ruc t ions for randomly selecting a on e o f a jrtumlity of test tools; 

instructions foi rand o mly selecting a one of a pliiialily o f testers; 
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5 - ins t ructions fbrtagfrotmg the one of t he plu r ality of lest twb by iht one o f fecptu r id tty 

of testers; 

whutiu tlit out oflkt pltuality o f le&l leiols targeted 4t a sygtegnmdei test; and 

wherein t he o ne i>f the plurality of toters ia cbnt r riuiiicably coupled to t he sy stem unde r 

test. 

102. (Canceled) The computet pregramprodget o f claim 1 01, fu r ther comprising iuMmcti o iis 
fa luAiving security ub&latli iiifuinmliuu of tht syAlehiuudci test, resp o iisivtly luXAttuUjig t fte o ne 
of the plurality of tc&t toub, 

103. (New) A network security testing apparatus coittprising: 
a plurality of testers; 

wherein each of said plurality of testers is adapted to conununicably couple to a system 

under test; 

5 wherein each tester of said plurality of testers has at least one quality of communicable 

coupling to the system under test, the at least one quality of communicable coupling including cost per 
bit, absolute speed, and geogr^>hical proximity of the selected tester to the system under test; 

wherein a test of the system mute* test is perfori&ed by a selected tester of said plurality 
of testers, the selected tester being selected from said plurality of testers based at least partially upon 
10 said customer profile; and , 

wherein the selected tester is selected from said plurality of testers based at least partially 
on the selected tester's quality of commuhicablc coupling, 

104. (New) A networie security testing method comprising: 

selecting a selected tester from a plurality of testers based at least partially on a tester's 
quality of communicable coupling, the quality of communicable coupling including at least one of cost 
per bit, absolute speed, and geographical proximity of the selected tester to the system under test; and 
5 executing a test by the selected tester, wherein the test is targeted at a system under test, . 

and wherein the selected tester is communkably coupled to the system under test 
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105. (New) A computer program product fof network security testing stored in a computer 
readable medium, comprising: 

instructions for selecting a selected tester front a plurality of testers based at least 
partially on a tester's quality of communicable couplings the quality of communicable coi^lingitt^tiding 
5 at least one of cost per bit, absolute speed, and geographical proximity of the selected tester to the 

system under test; and 

instructions for executing a test by the selected tester, wherein the test is targeted at a 
system under test, wherein the selected tester is coiranunicably coupled to the system undef tesL 

106. (New) A network security testing apparatus, comprising: 

a first tester that is adapted to commuhicably couple to a system under test and perform 
tests under the system under test; 

wherein said first tester makes apfe-verificatiori test on the system under test to confirm 
5 the first tester can reach the system under test; and 

wherein said first tester makes a post verification test on the system uriider test to 
determine if the firet tester has tripped a defensive mechanism in the system under test 

107. (New) The network Security testing apparatus of Claim 106, further wherein additional 
tests are performed to the system under test between the pre-verification test and the post verification 
test. 

108. (New) A network security testing method comprising: 
communicably coupling a first tester to a system under test; 

performing a pre-verificatton test on the system under test to confirm the first tester can 
reach the system under test; and 
5 performing a post verification test on the system under test to detenn^ 

has tripped a defensive meehanism in the system under test. 
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109. (New) The rietwoflc security testing itietliod ofCfeim 108, farther mcluding^ step of 
performing additional tests on the system under test between the ^verification test and the post 
verification test. 

1 10. (New) A computer program product for network security testing stored in a computer 
readable medium, comprising: 

instructions for communicably coupling a first tester to a system under test; 
instructions for performing a pie-verification test on die system under test to confirm the 
5 first tester can reach the system under test; and 

instructions for performing a post verification test on the system under test to determine 
if the first tester has tripped a defensive mechanism in the system under test 

111. (New) The computer program product for network security testing of Claim 1 1(K fbrther 
instructions for performing additional tests on the system under test between the pre-verification test 
and the post verification test 
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